National Cancer Center East Hospital: a staff member's telework terminal was taken over and clinical study participants' data may have been viewed

1. 2022-01-26

   While a staff member was teleworking, a pop-up announcing a virus infection appeared on the terminal. Following its instructions let a third party take over the terminal, and about 30 minutes later money was demanded. Suspecting fraud, the staff member cut the internet connection at once and reported to the responsible department. [1]

2. 2022-01-27

   It informed the Ministry of Health, Labour and Welfare of the incident and collected the terminal. [1]

3. 2022-02-20

   It received the forensic investigation report, which found no leak such as transfer of data files. [1]

4. 2022-03-25

   It announced the case. [1]

Information shown on the terminal screen during the 30 minutes of takeover may have been viewed: participant numbers, birth dates (for some participants), cancer types, sample types, test names, test result return dates, and researchers' names and affiliations. The study has 4,917 participants in all (as of January 26, 2022). No misuse of the information has been confirmed. [1]